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i 
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PARTY IN INTEREST: 

The real party in interest is the assignee of the application, Francotyp-Postalia 
, a German corporation, as the successor to the named Assignee of the 
application, Francotyp-Postalia AG & Co., KG. 

RELATED APPEALS AND INTERFERENCES: 

i 

! There are no related appeals and no related interferences. 

i 

STATUS OF CLAIMS: 

Claims 1-32 are on appeal, and constitute all of the original claims of the 

application. No claim has been cancelled during prosecution. All of claims 1-32 

i 

stand rejected. 

STATUS OF AMENDMENTS: 

j No Amendment has been filed following the final rejection dated July 27, 
2005. 

! 

SUMMARY OF THE CLAIMED SUBJECT MATTER: 

i 

i The four independent claims on appeal are set forth below with exemplary 
citations to the specification and drawings (Exhibit A) for all significant limitations 

i 
i 

therein. 

| 1 . A method for dependably transmitting service data from a data center 

to remotely-located terminal equipment, comprising the steps of: 

i 

. offering new service data at a data center for future use at terminal equipment 

! (Fig 2, step 210; p.10, 1.16-17); 

i 

i forming a request for new service data at the terminal equipment (Fig 2, step 
110; p.10, 1.17-18) 




m 



establishing a first communication between the terminal equipment and the 
data center and in said first communication transmitting said request 
data from the terminal equipment to the data center (Fig 2, step 120, r. 
to I. arrow to step 220; p. 10, 1.18-22), receiving the request data at the 
data center, transmitting the new service data requested in the request 
data from the data center to the terminal equipment, and receiving and 
storing the new service data at the terminal equipment (Fig 2, step 220, 
I. to r. arrow to step 110; p.10, 1.22 - p.11, 1.2); and 

establishing a second communication between the terminal equipment and 
the data center and in said second communication forming a message 
at the terminal equipment that refers to the new service data stored at 
the terminal equipment (Fig. 2, step 130; p. 11, I. 2-4), communicating 
said message from the terminal equipment to the data center (Fig. 2, r. 
tol. Arrow from step 130 to step 230; p. 11, I. 4-5), receiving the 
message from the terminal equipment at the data center and checking 
the message at the data center by comparison of information contained 
in the message with information generated from the new service data 
at the data center (Fig. 2, step 230; p. 11, I. 5-8) and, given a positive 
comparison result, transmitting a follow-up message from the data 
center to the terminal equipment allowing (Fig. 2, I. to r. arrow from 
step 230 to step 130; p. 11, I. 8) said terminal equipment, when 
appropriate, to use said new service data, and registering at the data 
center the valid transmission of the new service data to the terminal 
equipment (Fig. 2, step 130, p. 11, I. 11-16). 



12. A method for dependably transmitting service data from a data center 
to remotely-located terminal equipment, comprising the steps of: 

transmitting unencrypted service data from a data center to terminal 

i 

equipment (Fig. 2, 1 . to r. arrow from step 220 to step 120; p. 10, I. f22- 
p. 11,1.2); 

i generating a code at the terminal equipment based on the transmitted service 
! data (p. 16, I. 19 - p. 7, I. 7; using asymmetrical encryption algorithm 

(p. 17, 1. 1-14) or MAC (p. 18, 1. 18-20)); 

i 

' transmitting said code from said terminal equipment to said data center 
(Fig. 2, r. to I. arrow from step 130 to step 230; p. 1 1 J. 4-5); and 

; receiving said code at said data center and checking said code at said data 
center (Fig. 2, step 230; p. 11,1. 5-8) and transmitting a message from 

; said data center to said terminal equipment identifying a result of the 

■ check (Fig. 2, 1 . to r. arrow from step 230 to step 1 30, p. 1 1 , I. 8). 

' 17. An arrangement for dependably transmitting service data from a data 

i 

center to remotely-located terminal equipment, comprising: 

I a data center, and terminal equipment located remote from said data center, 
said data center offering new service data for future use at said 
terminal equipment (data center DZ in Figs. 1a and 1c, terminal 
equipment formed by all components in each of Figs. 1a and 1c to left 
of data center DZ); 

means for forming a request for new service data at the terminal equipment 
(in the embodiments of Figs. 1a and 1c: input unit 2, I/O controller 4, 
control unit 6, and main memory 7; in the embodiment of Fig. 1b: 
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control unit 6, I/O ports 4 P EPROM 9, 1 1, and RAM 7; p. 10, lines 17- 
18); 

means for establishing a first communication between the terminal equipment 
and the data center and in said first communication transmitting said 
request data from the terminal equipment to the data center (in the 
embodiment of Figs. 1a and 1c: modem 23, I/O controller 4, control unit 
6, main memory 7; in the embodiment of Fig. 1b: control unit 6, I/O 
ports 4, P EPROM 9, 11, RAM 7; p. 10, I. 18-22), means for receiving 
the request data at the data center and for transmitting the new service 
data requested in the request data from the data center to the terminal 
equipment, (all embodiments: modem 33, server 32 and databank 31 
at data center DZ; p. 10, line 22 - p. 11, line 2), and means for 
receiving and storing the new service data at the terminal equipment 
(in all embodiments: modem 33, server 32, and databank 31 at data 
center DZ (Figs. 1a and 1c)), (and means for receiving and storing the 
new service data at the terminal equipment (all embodiments: modem 
23, I/O controller 4, control unit 6, main memory 7 and fee schedule 
memory 16 (Figs. 1a, 1b, 1c)); and 

means for establishing a second communication between the terminal 
equipment and the data center and in said second communication 
forming a message at the terminal equipment that refers to the new 
service data stored at the terminal equipment and for communicating 
said message from the terminal equipment to the data center 
(embodiments of Figs. 1a and 1c: modem 23, I/O controller 4, control 



i unit 6, program memory 11, main memory 7, embodiment of Fig. 1b: 

i 

' control unit 6, I/O ports 4, P EPROM 9,11, and RAM 7; p. 10,1.1 8-22), 

i 

' means for receiving the message from the terminal equipment at the 

data center and for checking the message at the data center by 

; comparing information contained in the message with information 

generated from the new service data at the data center and, given a 
positive comparison result, for forming and transmitting a follow-up 
message from the data center to the terminal equipment allowing said 
terminal equipment, when appropriate, to use said new service data, 

i 

and means for registering at the data center the valid transmission of 
the new service data to the terminal equipment (all embodiments: 
modem 33, server 32 and databank 31 at the data center DZ; p. 11,1. 
5-16). 

28. An arrangement for dependably transmitting service data from a data 

i 

center to remotely-located terminal equipment, comprising: 

i 

a data center, and terminal equipment located remote from said data center 

1 (data center DZ in Figs. 1a and 1c, terminal equipment formed by all 

i 

- components in each of Figs. 1a and 1c to left of data center DZ); 

! means for transmitting unencrypted service data from the data center to the 

J terminal equipment (all embodiments: modem 33, server 32 and 

i 

databank 31 at data center DZ; p. 10, 1. 16-17); 

i 

i means for generating a code at the terminal equipment based on the 

I transmitted service data (embodiments of Figs. 1a and 1c: control unit 

; 6, program memory 11 and main memory 7, embodiment of Fig. 1b: 



control unit 6, P EPROM 9, 11, and RAM 7; p. 16, I. 19 - p. 7, I. 7; 
using asymmetrical encryption algorithm (p. 17, I. 1-14) or MAC (p. 18, 
I. 18-20)); means for transmitting said code from said terminal 
equipment to said data center (all embodiments: modem 23; p. 11, I. 4- 
5); and 

means for receiving said code at said data center and for checking said code 
at said data center and for transmitting a message from said data 
center to said terminal equipment identifying a result of the check (all 

| embodiments: modem 33, server 32 and databank 31 at data center 

I 

I DZ; p. 11, I. 5-8). 

I 

GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL: 

i 

j The following issues are presented for review in the present Appeal, 
presented in the manner formulated by the Examiner: 

Whether the subject matter of claims 1-11 is anticipated under 35 U.S.C. 
§l[02(b) by United States Patent No. 4,802,218 (Wright et al.); 

Whether the subject matter of claims 12-16 is anticipated under 35 U.S.C. 
02(b) by Wright et al.; 

Whether the subject matter of claims 17-27 is anticipated under 35 U.S.C. 
02(b) by Wright et al.; and 

Whether the subject matter of claims 28-32 is anticipated under 35 U.S.C. 
02(b) by Wright et al. 
ARGUMENT: 



Although all claims of the application stand rejected as being anticipated by 
Wright et al. (Exhibit B), the Examiner, in the final rejection and in previous Office 
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I 

I 

Actions, separated the claims according to the four independent claims of the 

application, as claims 1-11, claims 12-16, claims 17-27 and claims 28-32. Even 

i 

though the Examiner adopted the identical approach for the independent claims for 
all of the groups of simply repeating the claim language verbatim, and providing the 
identical citation to the Wright et al. patent with regard to each independent claim, 
Appellant nevertheless will provide separate sections below for the groups of claims 
identified by the Examiner. The following introductory comments, however, are 
applicable to all of these groups. 
! The present Appeal is a reinstatement of a previous Appeal. Upon the filing 

of Appellant's previous Appeal Brief, all of the rejections that were the subject of the 

i 

original appeal were withdrawn, and the aforementioned rejection based on Wright et 

! 

al. was made. The Examiner has never undertaken a step-by-step comparison of 
the steps of the method claims on Appeal against the teachings of the Wright et al. 
patent, and has not undertaken a component-by-component analysis of the 
independent apparatus claims with regard to the teachings of the Wright et al. 
patent. For example, throughout the prosecution, the Examiner has never 
specifically identified what component of group of components the Examiner 
considers to correspond to the "data center" that is claimed in each of the 
independent claims. Appellant has assumed that the Examiner is equating the card 
MPU60 in the Wright et al. with the claimed "data center," since that is the only 
source of data that are to be entered into the terminal in the Wright et al. reference, 

but the Examiner has never confirmed whether this assumption is correct and in 

i 

response to that assumption being stated in writing by the Appellant numerous times 
during prosecution, the Examiner has provided no further information on this point. 
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! Moreover, a central issue throughout prosecution, after prosecution was 
reopened and the rejection on the Wright et al. reference was made, has been 
where, in the Wright et al. reference, the Examiner considers a communication to 
take place between devices or components that are located remotely from each 
other, as required in each of the independent claims. This issue was the central 
point argued in Appellant's response to the first Office Action that was issued after 
prpsecution was reopened, and in the final rejection the Examiner, in response to 
those arguments, provided further citations to the Wright et al. reference. Following 
the final rejection, an interview was conducted wherein it was explained why none of 
those further citations has anything to do with a data center and terminal equipment 
that are remotely-located relative to each other. Now, for the first time, in an 
Advisory Action rendered following Appellant's response to the final rejection, the 

Examiner has provided another citation to a passage in the Wright et al. reference, 

i 

which has never before been cited or relied upon by the Examiner. Presumably, in 

the Examiner's Answer, the Examiner will have to be more informative and, for the 

i 

first time, identify components in the Wright et al. reference that the Examiner 
contends correspond to terminal equipment and a data center that is remotely 
located relative to the terminal equipment. Of course, this will necessitate the filing 
of a Reply Brief by the Appellant, since this will be the first time that Appellant will be 
informed of that position of the Examiner. Appellant respectfully submits that neither 
the Appellant nor the Board of Patent Appeals and Interferences is well served by 
having to wait until the Examiner's Answer is filed to learn highly relevant details of 

the Examiner's position. Moreover, it is inexplicable that the Examiner would wait 

i 

until rendering an Advisory Action, following the filing of a response to the final 



rejection, to provide a citation for the first time with respect to an issue that has been 
central as to whether the Wright et al. reference anticipates the claims on appeal. 
Rejection Of Claims 1-11 As Being Anticipated By Wright et al. 

1 As noted above, claim 1 refers to at least one communication between 
terminal equipment and a data center, the terminal equipment and the data center 

being remote from each other. In view of the fact that the Examiner merely provided 

i 

a general citation to the aforementioned lengthy passage in the Wright et al. 
reference, it is not clear which component or components in the Wright et al. 
reference the Examiner is considering as being comparable to a data center that is 
remote from terminal equipment. Since the only data exchange that is described in 

the passage of Wright et al. cited by the Examiner is a data exchange between a 

i 

smart card and a postage meter having a card reader that receives the smart card, 
Appellant assumes the Examiner is considering the meter to be comparable to the 
terminal equipment of the independent claims of the application, and is considering 
the smart card to somehow be the equivalent of a data center remote from the 
terminal equipment. Appellant does not disagree that the postage meter described 
in the Wright et al. reference corresponds to the terminal equipment of the claims of 
the present application, however, the smart card (data carrier) in the Wright et al. 
reference clearly has no correspondence whatsoever with a data center remote from 
the terminal equipment. In order for the smart card and the postage meter in the 
Wright et al. system to communicate with each other, it is essential that the smart 
card not be remote from the terminal equipment, but be physically inserted in the 
terminal equipment. The fact that the smart card can be removed from the terminal 
equipment is irrelevant, because if and when the smart card is removed from the 



postage meter in the Wright et al. system, it is impossible for there to be any 

communication between the smart card and the postage meter. The explicit 

j 

language of each of the independent claims of the present application requires a 

i 

communication between the terminal equipment and a remote data center located 

remote from the terminal equipment, meaning that the communication must occur 

i 

when the data center and the terminal equipment are remote from each other. 

Moreover, the Wright et al. reference itself includes language that clearly 
distinguishes the smart card (data carrier) disclosed therein from a source of data 
that is remote from the terminal equipment. As stated in the Wright et al. reference 
in ( the paragraph beginning at column 1, line 33, the Wright et al. reference 
distinguishes the type of equipment disclosed therein (characterized as "point-of-sale 

(POS) terminals" in column 1, line 17 of Wright et al.) from the type of system to 

i 

wfiich the present application is directed, namely involving terminal equipment and a 

data center remote therefrom. The Wright et al. system is directed to maintaining 

i 

adequate security for such point-of-sale terminals, and characterizes maintaining 
such security as being problematic because point-of-sale system "conventionally are 

passive and do not authenticate themselves or the particular transactions for which 

I 

thby are used. Instead, on-line access through a terminal to a central account 
system, such as a bank or credit card account records, is required for confirmation of 
each transaction." (Wright et al., column 1 , lines 37-41 ). 

' The explicit language of the Wright et al. reference itself, therefore, states that 
the use of a card as a data carrier, as described in that reference, is not the same as 

alcommunication with a remote data source. 

I 

i 

i 

i 
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! The fact that the Wright et al. reference provides no disclosure whatsoever 
involving a remote data center communicating with a terminal device is sufficient by 
itself to preclude the Wright et al. reference from anticipating claim 1 of the present 
application. 

Equally as importantly, the Wright et al. reference, particularly the passage 
cited by the Examiner, merely refers to a "handshake" procedure by which 
verification of authentification of the inserted card is accomplished. This type of 
security verification has nothing to do with the type of data verification to which the 
subject matter of claim 1 is directed, i.e, to ensure that data have been correctly 
transferred (downloaded) from the remote data center to the terminal equipment. It 

is for this reason that in each of the independent claims of the present application, 

i 

the return or answerback message that proceeds from the terminal equipment to the 
data center is formed by involving the originally transmitted message itself. 
Independent claim 1 states that the answerback message "refers to" the originally 
transmitted message. 

i 

I The handshake procedure disclosed in the Wright et al. reference, because it 
is simply to verify the authenticity or the authorization of the card that is currently 
inserted in the postage meter, does not involve a transfer of data whereby the 
correctness of the transferred data needs to be verified. Even though in the Wright 
et al. reference a serial number is transmitted from the card to the device, and a 
verification is made based on that serial number and a verification message is then 
transmitted back to the card to then enable a subsequent further exchange between 
the card and the postage meter, the message that is transmitted back to the card 

i 

from the postage meter is simply a "yes" or "no" statement verifying or denying 



authorization. The message that is transmitted back to the card from the postage 

i 

meter does not in any way refer to the originally transmitted serial number itself, nor 

i 

dobs it include any coded information that has been based on or derived from the 
originally transmitted serial number. 

Moreover, independent claim 1 requires that the verification take place in 
separate first and second communications. The Examiner did not identify what steps 

of, functions in the cited passage of Wright et al. the Examiner considers as 

i 

corresponding to these first and second communications. In independent claims 1 

i 

and 17, each of the first and second communications includes a transmission in both 
directions between the data center and the terminal equipment. The aforementioned 
handshake procedure in the Wright et al. is a single communication between the 

card and the postage meter. There is no second communication involved in the 

i 

handshake procedure in the Wright et al. reference. Although a further data 

i 

exchange between the card and the postage meter can occur in the Wright et al. 
system, after verification has been accomplished, this further exchange is not in any 
way involved in the handshake procedure, and in fact cannot even proceed until the 

handshake procedure has been completed so that verification has been established. 

i 

j In response to these arguments, at paragraph 4 on page 2 of the final 
rejection, the Examiner directed Appellant's attention to column 14, lines 41-60 in the 
Wright et al reference. Appellant is unable to find any statement whatsoever in that 

passage that refers to, or could be interpreted as a reference to, a "data center," 

i 

remote or otherwise. 

| The aforementioned passage cited by the Examiner refers to the service card 

i 

being loaded into the terminal MPU30. The terminal MPU30 is the microprocessor 

j 
i 
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I 

I 

•t . 

that is located in the terminal unit, and can be accessed by the service card (or other 

i 

data-carrying cards), only by those cards being physically inserted in the terminal 
equipment. It should be noted that Figure 2a of the Wright et al reference shows the 
card MPU as a separate block from the terminal 20 and the terminal MPU30, 
connected thereto by arrowed lines, but these arrowed lines merely schematically 

indicate the flow of data between the card MPU and the terminal MPU30, via a 

i 

handshake channel 61, and do not indicate any "remoteness" of the card or the card 

MPU from the terminal MPU30. This is made explicitly clear in Figure 7 of the Wright 

i 

et^al reference, wherein each card is shown as being inserted in the unit 20', so as to 
be able to communicate with the terminal MPU30 thereof. 

; Therefore, there is no data source ("data center" or otherwise) that is located 
remote from the terminal equipment, as explicitly required in independent claim 1 of 

the present application. Moreover, there is no component in the Wright et al 

i 

reference that corresponds to a "data center" as that term is commonly understood 

i 

by those of ordinary skill in the relevant technology. 

j 

' The term "data center" inherently means, or refers to, a center that is remote 
from the terminal units with which it communicates. Such communication may be 
wireless or by land lines, but in all instances the data center is located remote from 

the terminal equipment that it services. This is made clear in the present application 

i 

by the indication in Figure 1 of the communication between the data center DC and 
the I/O controller 4 via the modem 23. 

This is also consistent with almost every reference that the Examiner has 

i 

made of record. In United States Patent No. 5,008,827 (Sansone et al, Exhibit C), 

i 
i 
i 
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I 

I 

' ] 

i 

i 

the PB data center 18 (Fig. 1) and the user stations Ui, U 2 ...U n are clearly remote 

from the terminal equipment with which they communicate via network 16. 

i 

In United States Patent No. 6,064,994 (Kubatzki et al, Exhibit D), the data 

! 

central DC is clearly indicated as communicating with a postage meter machine FM 
via line 17, clearly a remote arrangement (Fig. 1). 

! In United States Patent No. 5,715,164 (Liechti et al, Exhibit E), the data center 
15 is again shown to communicate wirelessly with postage meters 101-1 through 
101-P (Fig. 1). 

' In United States Patent No. 4,752,950 (Le Carpentier, Exhibit F), the central 
station 2 communicates with a telephone network 3 via modems 6V, and the 
telephone network 3, in turn, communicates with local stations 4X through 4Z 
respectively via modems 6X through 6Z (Fig. 1). Again, a remote arrangement. 

i The same is true in numerous references cited by the Appellant. 
| In United States Patent No. 5,699,415 (Wagner, Exhibit G), for example, the 
data center 18 is clearly shown as communicating with the user station 10 via 
communication terminal equipment 14 and 16, and communication line 15 (Fig. 1). 
Again, a remote arrangement. 

The same is true in United States Patent No. 4,097,923 (Eckert, Jr. et al, 

i 

Exhibit H), wherein the blocks 1 represent remote postage meter stations capable of 
communicating with a data center represented by block 5 Fig. 1; (column 5, lines 50- 
|52). 

, Hundreds, if not thousands, of other examples could be cited. 

i 

i It is thus abundantly clear that the term "data center" as used in the claims of 

the present application inherently means a device that is located remote from the 

i 
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I 

terminal equipment. This, in addition to the aforementioned explicit statements in the 

preambles of each of the independent claims, clearly precludes the Wright et al 

i 

reference from reading on any of those claims. 

! Appellant recognizes that the Examiner is required to give all terms in a patent 
claim the broadest reasonable interpretation. Appellant submits, however, this does 
not permit the Examiner to ignore common, well-understood meanings for terms, 
otherwise every term having a well-understood meaning would have to be re-defined 
in each patent claim in which it is used. As long as there is nothing in the claim 

language itself, and nothing in the specification, to indicate that a word having a 

i 

common, well-understood meaning to those of ordinary skill in the relevant 
technology is being used in a manner contrary to that well-understood meaning, the 
well-understood meaning must be accepted, and the claim interpreted according to 

that well-understood meaning. 

i 

Appellant respectfully submits that such is the case in each of the 
independent claims of the present application. In view of the complete absence 
anywhere in the Wright et al reference of the use of a "data center" or any equivalent 

component for entering data into a terminal unit in the manner set forth in the 

i 

independent claims of the present application, the Wright et al reference does not 

i 

anticipate claim 1. 

In response to these arguments, in the aforementioned Advisory Action (dated 
^October 21, 2005) the Examiner for the first time indicated a citation to column 7, 
lines 57-62 of the Wright et al. reference. That passage merely states that although 
the above-described handshake procedure in Wright et al. can be performed with an 

i 

| operation microprocessor for the terminal, or one remote to the terminal, it is 



i 

I 

preferred that the procedure be performed with a secure microprocessor embedded 
in the actual value dispensing section of the terminal. 

Referring to Figure 2a of the Wright et al. reference, this merely means that 
the terminal MPU30, instead of being located within the terminal housing 20, could 
b^ located outside of that housing, but that has nothing to do with whether the Wright 
etal. reference discloses a data center that is remote from the terminal equipment, 
since the Examiner has never contended that the terminal MPU30 corresponds to 
the claimed "data center." Moreover, the handshake procedure, as described above, 
does not involve transfer or storage of the actual data to be transmitted from the data 

center to the terminal equipment, but is only a preliminary procedure that is 

I 

undertaken to authorize such a transfer in the Wright et al. Therefore, whether the 
terminal MPU30 is within the housing of the terminal equipment 20 or possibly 
rejmote thereto is completely irrelevant to the applicability of the Wright et al. 

reference to the language of claim 1 . 

! 

Claims 2-1 1 add further method steps to the novel method of claim 1 , and are 
therefore not anticipated by Wright et al. for the same reasons discussed above in 
connection with claim 1 . 

Rejection Of Claims 12-16 As Being Anticipated Under 5102(b) By Wright et al. 

! Since the Examiner applied the same citations from Wright et al. against 

i 

independent claim 12 as were applied against independent claim 1, Appellant's 

argument above with regard to independent claim 1 are equally applicable to claim 

i 

12. Claims 13-16 add further steps the novel method of claim 12, and are therefore 
not anticipated by Wright et al. for the same reasons as to why claim 12 is not 
anticipated by Wright et al. 

i 
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Rejection Of Claims 17-27 As Being Anticipated Under 5102(b) By Wright et al. 

; Since the Examiner applied the same citations from Wright et al. against 

i 

independent claim 17 as were applied against independent claim 1 (even though 
claim 17 is an apparatus claim), Appellant's argument above with regard to 
independent claim 1 are equally applicable to claim 17. Claims 18-27 add further 
structure to the novel apparatus of claim 17, and are therefore not anticipated by 
Wright et al. for the same reasons as to why claim 17 is not anticipated by Wright et 
al. 

Rejection Of Claims 28-32 As Being Anticipated Under 5102(b) By Wright et al 

Since the Examiner applied the same citations from Wright et al. against 

i 

independent claim 28 as were applied against independent claim 1 (even though 
claim 28 is an apparatus claim), Appellant's argument above with regard to 
independent claim 1 are equally applicable to claim 28. Claims 29-32 add further 
structure to the novel apparatus of claim 28, and are therefore not anticipated by 
Wright et al. for the same reasons as to why claim 28 is not anticipated by Wright et 
al. 

i 

CONCLUSION: 

For the above reasons, Appellant respectfully submits the Examiner is in error 

! 

in law and in fact in rejecting claims 1-32. Reversal of these rejections is proper, the 
same is respectfully requested. 

! Submitted 

SCHIFF, HARDIN LLP, CUSTOMER NO. 26574 

| Patent Department, 6600 Sears Tower 

233 South Wacker Drive, Chicago, Illinois 60606 
Telephone: 312/258-5790 
Attorneys for Appellant. 
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CLAIMS APPENDIX 

i 

1 . A method for dependably transmitting service data from a data center 
to 'remotely-located terminal equipment, comprising the steps of: 

; offering new service data at a data center for future use at terminal 
equipment; 

i 

forming a request for new service data at the terminal equipment; 

j establishing a first communication between the terminal equipment and the 
data center and in said first communication transmitting said request 

| data from the terminal equipment to the data center, receiving the 

request data at the data center, transmitting the new service data 

i 

requested in the request data from the data center to the terminal 
. equipment, and receiving and storing the new service data at the 

terminal equipment; and 

! establishing a second communication between the terminal equipment and 

! the data center and in said second communication forming a message 

i 

at the terminal equipment that refers to the new service data stored at 
i the terminal equipment, communicating said message from the 

terminal equipment to the data center, receiving the message from the , 

i 

' terminal equipment at the data center and checking the message at the 

data center by comparison of information contained in the message 

i 

with information generated from the new service data at the data center 
' and, given a positive comparison result, transmitting a follow-up 

message from the data center to the terminal equipment allowing said 

i 
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I 

terminal equipment, when appropriate, to use said new service data, 

I 

and registering at the data center the valid transmission of the new 

! 

service data to the terminal equipment. 

i 

2. A method as claimed in claim 1 wherein said follow-up message 
comprises an OK message allowing the terminal equipment to be switched into an 
operating mode. 

3. A method as claimed in claim 2 wherein the step of transmitting said 
OK message includes transmitting a marking in said OK message indicating that the 
new service data stored at the terminal equipment are valid. 

4. A method as claimed in claim 1 wherein the step of storing the new 
service data in the first communication comprises intermediately storing the new 
service data at the terminal equipment, and wherein the step of transmitting said 
follow-up message in said second communication comprises transmitting a load 

instruction from the data center to the terminal equipment, and wherein said second 

i 

communication includes the step of, upon receipt of said load instruction at the 

i 

I 

terminal equipment, loading the new service data into a non-volatile memory of a 

i 

processing module at the terminal equipment. 

i 

1 5. A method as claimed in claim 1 wherein the step of forming said 
message in the second communication at the terminal equipment comprises forming 
a message including a version number associated with the new service data and a 
checksum. 

i 6. A method as claimed in claim 1 wherein the step of forming said 

message in the second communication at the terminal equipment comprises forming 

i 

■ -20- 
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a message including a version number associated with the new service data and an 
encrypted checksum. 

7. A method as claimed in claim 1 wherein the step of offering said new 
service data comprises offering postage fee schedule table data as said new service 
data, and comprising the step of providing a postage computer having a processing 
module which makes use of said postage fee schedule table data at said terminal 
equipment. 

' 8. A method as claimed in claim 7 wherein the step of forming said 

i 

message in said second communication at said terminal equipment includes forming 

a message including a version number of the new service data and an encrypted 

i 

checksum, and comprising the step of providing a postage meter machine at said 
terminal equipment in communication with said postage computer, storing a secret 
kejy in said postage meter machine, forming said encrypted checksum in said 
postage meter machine using a symmetrical encryption algorithm and said secret 

key, and storing said secret key as well at said data center and using said secret key 

i 

at said data center to check said message from said terminal equipment in said 

i 

second communication. 

i 

9. A method as claimed in claim 7 wherein the step of forming said 
message in said second communication at said terminal equipment comprises 
forming a message including a version number of the new service data and an 
encrypted checksum, and comprising the steps of storing a public key in said 
postage computer and forming said encrypted checksum in said postage computer 
using an asymmetrical encryption algorithm and said public key, and storing a non- 
public secret key, related to said public key, at said data center and using said non- 

i 



I 



I 



public secret key at said data center to check said message in said second 

i 

communication. 

i 
i 

j 10. A method as claimed in claim 1 wherein the step of offering new 

service data at said data center comprises offering new postage fee schedule table 

i 

data at said data center for future use in postage calculation, and wherein the step of 
checking the message transmitted from the terminal equipment to the data center in 
the second communication comprises checking information contained in said 
message by comparison with information generated from the new postage fee 

schedule table data, and wherein the step of transmitting said follow-up message in 

i 

said second communication from said data center to the terminal equipment 

i 

comprises transmitting an OK message indicating that the new postage fee schedule 
table data received at said terminal equipment are valid and also including a load 
instruction instructing the terminal equipment to load the new postage fee schedule 
table data into a non-volatile memory of a postage computer at said terminal 

equipment. 

i 

' 11. A method as claimed in claim 10 comprising the additional step of 
loading said new postage fee schedule table data into said non-volatile memory at 
said postage computer upon receipt at said terminal equipment of said follow-up 
message. 

12. A method for dependably transmitting service data from a data center 
to remotely-located terminal equipment, comprising the steps of: 

i 

; transmitting unencrypted service data from a data center to terminal 
equipment; 



i 
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i 

I 

generating a code at the terminal equipment based on the transmitted service 
data; 

I 

transmitting said code from said terminal equipment to said data center; and 

i receiving said code at said data center and checking said code at said data 

j 

; center and transmitting a message from said data center to said 

terminal equipment identifying a result of the check, 
i 13. A method as claimed in claim 12 comprising providing a postage 
computer at said terminal equipment, and wherein the step of transmitting 

unencrypted service data to the terminal equipment comprises transmitting 

i 

unencrypted fee schedule table data, as said unencrypted service data, to said 

postage computer, and comprising the steps of generating a checksum at said 

i 

postage computer based on the transmitted fee schedule table data and transmitting 

the checksum to the data center as at least a part of said code, and wherein the step 

i 

of i checking the code at the data center comprises checking the checksum at the 
data center on the basis of a stored checksum stored at said data center and 
wherein the step of transmitting a message to the terminal equipment comprises 
transmitting an OK message to the terminal equipment given coincidence of said 
stored checksum with the checksum transmitted to the data center. 

' 14. A method as claimed in claim 12 comprising providing a postage 

computer at said terminal equipment, and wherein the step of transmitting 

i 

unencrypted service data to the terminal equipment comprises transmitting 
unencrypted fee schedule table data, as said unencrypted service data, to said 
postage computer, and comprising the steps of generating a encrypted code at said 
postage computer based on the transmitted fee schedule table data and transmitting 

! -23- 
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the encrypted code to the data center as at least a part of said code, and wherein the 
step of checking the code at the data center comprises checking the encrypted code 
at the data center on the basis of a stored encrypted code stored at said data center 
and wherein the step of transmitting a message to the terminal equipment comprises 
transmitting an OK message to the terminal equipment given coincidence of said 
stored encrypted code with the encrypted code transmitted to the data center. 

15. A method as claimed in claim 12 comprising providing a postage 
computer at said terminal equipment and wherein the step of transmitting 
unencrypted service data to the terminal equipment comprises transmitting 
unencrypted fee schedule table data, as said unencrypted service data, to said 
postage computer, and wherein the step of generating a code at the terminal 
equipment comprises generating a signature representing information dependent on 
the transmitted fee schedule table data and encrypting said information with a public 

write key to form said signature, and wherein the step of transmitting said code to the 

i 

data center comprises transmitting said signature to the data center, and wherein the 
step of checking the code at the data center comprises decrypting the signature at 
the data center with a secret read key according to an asymmetrical algorithm and 
checking the information in the signature with information stored at the data center 
and, given a positive comparison result, transmitting an OK message to the terminal 
equipment. 

| 16. A method as claimed in claim 15 comprising the step of forming a 

i 

checksum as said information contained in said signature. 

i 

17. An arrangement for dependably transmitting service data from a data 
center to remotely-located terminal equipment, comprising: 
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i 
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a data center, and terminal equipment located remote from said data center, 
said data center offering new service data for future use at said 
terminal equipment; 

means for forming a request for new service data at the terminal equipment; 

means for establishing a first communication between the terminal equipment 
and the data center and in said first communication transmitting said 
request data from the terminal equipment to the data center, means for 
receiving the request data at the data center and for transmitting the 
new service data requested in the request data from the data center to 
the terminal equipment, and means for receiving and storing the new 
service data at the terminal equipment; and 

means for establishing a second communication between the terminal 
equipment and the data center and in said second communication 
forming a message at the terminal equipment that refers to the new 
service data stored at the terminal equipment and for communicating 
said message from the terminal equipment to the data center, means 
for receiving the message from the terminal equipment at the data 
center and for checking the message at the data center by comparing 
information contained in the message with information generated from 
the new service data at the data center and, given a positive 
comparison result, for forming and transmitting a follow-up message 
from the data center to the terminal equipment allowing said terminal 
equipment, when appropriate, to use said new service data, and 
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means for registering at the data center the valid transmission of the 

! 

new service data to the terminal equipment. 

1 18. An arrangement as claimed in claim 17 wherein said means for forming 

i 

said follow-up message comprises means for forming an OK message allowing the 

terminal equipment to be switched into an operating mode. 

i 

i 19. An arrangement as claimed in claim 18 wherein said means for forming 
said OK message means for including a marking in said OK message indicating that 
the new service data stored at the terminal equipment are valid. 

20. An arrangement as claimed in claim 17 wherein said means for storing 

i 

the new service data in the first communication comprise means for intermediately 

i 

storing the new service data at the terminal equipment, and wherein said means for 
transmitting said follow-up message in said second communication comprise means 
for transmitting a load instruction from the data center to the terminal equipment, and 
Wherein said terminal equipment comprises means for, upon receipt of said load 
instruction at the terminal equipment, loading the new service data into a non-volatile 
nhemory of a processing module at the terminal equipment. 

i 

j 21 . An arrangement as claimed in claim 17 wherein said means for forming 
said message in the second communication at the terminal equipment comprise 

i 

means for forming a message including a version number associated with the new 

i 

service data and a checksum. 

i 

| 22. An arrangement as claimed in claim 17 wherein said means for forming 

said message in the second communication at the terminal equipment comprise 

! 

means for forming a message including a version number associated with the new 
service data and an encrypted checksum. 

i 

i 
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! 23. An arrangement as claimed in claim 17 wherein said data center 
comprises means for offering postage fee schedule table data as said new service 
data, and wherein said terminal equipment comprises a postage computer having a 

processing module which makes use of said postage fee schedule table data. 

i 

24. An arrangement as claimed in claim 23 wherein said means for forming 
said message in said second communication at said terminal equipment comprise 
means for forming a message including a version number of the new service data 

and an encrypted checksum, and wherein said terminal equipment comprises a 

i 

postage meter machine in communication with said postage computer, means for 

i 

storing a secret key in said postage meter machine, means for forming said 

I 

encrypted checksum in said postage meter machine using a symmetrical encryption 

i 

algorithm and said secret key, and wherein said data center comprises means for 
storing said secret key as well at said data center and wherein said means for 

checking comprise means for using said secret key to check said message from said 

i 

terminal equipment in said second communication. 

25. An arrangement as claimed in claim 23 wherein said means for forming 
said message in said second communication at said terminal equipment comprise 

means for forming a message including a version number of the new service data 

j 

and an encrypted checksum, and wherein said postage computer comprises means 
for storing a public key and for forming said encrypted checksum using an 
asymmetrical encryption algorithm and said public key, and wherein said data center 
comprises means for storing a non-public secret key, related to said public key, at 
said data center and wherein said means for checking comprise means for using 
said non-public secret key to check said message in said second communication. 



i 



i 



I 

. i 

! 

26. An arrangement as claimed in claim 17 wherein said data center 

i 

comprises means for offering new postage fee schedule table data at said data 
center for future use in postage calculation, and wherein said means for checking the 
message transmitted from the terminal equipment to the data center in the second 
communication comprises means for checking information contained in said 
message by comparison with information generated from the new postage fee 
schedule table data, and wherein said means for transmitting said follow-up 
message in said second communication from said data center to the terminal 
equipment comprises means for transmitting an OK message indicating that the new 
postage fee schedule table data received at said terminal equipment are valid and 

also including a load instruction instructing the terminal equipment to load the new 

i 

postage fee schedule table data into a non-volatile memory of a postage computer at 
said terminal equipment. 

27. An arrangement as claimed in claim 26 wherein said terminal 

equipment comprises loading said new postage fee schedule table data into said 

i 

non-volatile memory at said postage computer upon receipt at said terminal 
equipment of said follow-up message. 

! 28. An arrangement for dependably transmitting service data from a data 
center to remotely-located terminal equipment, comprising: 

a data center, and terminal equipment located remote from said data center; 

j means for transmitting unencrypted service data from the data center to the 

! 

terminal equipment; 

I means for generating a code at the terminal equipment based on the 
transmitted service data; 



i 
i 



I 

I 

I 

; means for transmitting said code from said terminal equipment to said data 
center; and 

means for receiving said code at said data center and for checking said code 
at said data center and for transmitting a message from said data 
center to said terminal equipment identifying a result of the check. 

29. An arrangement as claimed in claim 28 wherein said terminal 
equipment comprises a postage computer, and wherein said means for transmitting 

unencrypted service data to the terminal equipment comprises means for 

i 

transmitting unencrypted fee schedule table data, as said unencrypted service data, 

i 

tojsaid postage computer, and wherein said postage computer comprises means for 
generating a checksum based on the transmitted fee schedule table data and 
wherein said means for transmitting said code comprise means for transmitting the 
checksum to the data center as at least a part of said code, and said means for 
checking the code at the data center comprise means for checking the checksum at 
the data center on the basis of a stored checksum stored at said data center and for 
transmitting a message to the terminal equipment comprising an OK message to the 
terminal equipment given coincidence of said stored checksum with the checksum 

transmitted to the data center. 

i 

; 30. An arrangement as claimed in claim 28 wherein said terminal 
equipment comprises a postage computer, and said means for transmitting 

unencrypted service data to the terminal equipment comprises means for 

i 

transmitting unencrypted fee schedule table data, as said unencrypted service data, 
to! said postage computer, and wherein said postage computer comprises means for 
generating a encrypted code based on the transmitted fee schedule table data and 
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wherein said means for transmitting said code comprise means for transmitting the 

enjcrypted code to the data center as at least a part of said code, and wherein said 

I 

means for checking the code at the data center comprise means for checking the 

enprypted code at the data center on the basis of a stored encrypted code stored at 

I 

sajd data center and for transmitting a message to the terminal equipment 

| 

comprising an OK message to the terminal equipment given coincidence of said 
stored encrypted code with the encrypted code transmitted to the data center. 

j 31. An arrangement as claimed in claim 28 wherein said terminal 

i 

equipment comprises a postage computer and wherein said means for transmitting 

i 

unencrypted service data to the terminal equipment comprise means for transmitting 

unencrypted fee schedule table data, as said unencrypted service data, to said 

i 

postage computer, and wherein said postage computer comprises said means for 
generating a code at the terminal equipment, said postage computer generating a 

signature, as said code, representing information dependent on the transmitted fee 

i 

schedule table data and encrypting said information with a public write key to form 
sajd signature, and wherein said means for transmitting said code to the data center 
comprises means for transmitting said signature to the data center, and said means 

for! checking the code at the data center comprise means for decrypting the signature 

i 

at jthe data center with a secret read key according to an asymmetrical algorithm and 

forj checking the information in the signature with information stored at the data 

i 

center and, given a positive comparison result, for transmitting an OK message to 
the terminal equipment. 

32. An arrangement as claimed in claim 31 wherein said postage computer 

comprises forming a checksum as said information contained in said signature. 

I 
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